The procedure for evaluating cybersecurity events, such as a new public vulnerability, a supplier notice or a fleet anomaly, to decide whether they affect the item and need vulnerability handling.
Guide or manual Work product in the Vehicle cybersecurity and software update lifecycle
It makes event triage consistent and fast, so that relevant events become vulnerability cases and irrelevant ones are closed with a recorded reason. Without it, each analyst judges events differently, relevant vulnerabilities are dismissed, and there is no evidence of why an event was closed.
The full lifecycle detail, with its charts, flows, tables and every section, is for registered members. Registration is free and takes a minute. You come back to this page afterwards.